ZTE GoldenDB Database Permission Management Vulnerability Allowing Privilege Escalation and Content Deletion

A permission management and access control vulnerability has been identified in ZTE GoldenDB database versions 6.1.03.09, 6.1.03.10, 7.2.01.01, and Lite7.2.01.01. This vulnerability allows attackers to manipulate requests to bypass privilege restrictions, enabling them to delete content.

Impact

Exploitation of this vulnerability could lead to unauthorized deletion of content within the database.

Remediation

Users can upgrade to ZTE GoldenDB versions 6.1.03.11, 7.2.01.01P1, or Lite7.2.01.01P1. For assistance, contact the ZTE Global Customer Support Center.